build(deps): bump the dependencies group across 1 directory with 8 updates by dependabot[bot] · Pull Request #879 · ethpandaops/dora

dependabot · 2026-09-28T09:05:13Z

Bumps the dependencies group with 8 updates in the / directory:

Package	From	To
github.com/ethereum/go-ethereum	`1.17.5`	`1.17.6`
github.com/ethpandaops/spamoor	`1.2.4-0.20260925130528-570d240766f6`	`1.2.4`
github.com/ethpandaops/xatu	`1.22.1-0.20260824050538-619c572d19c3`	`1.22.1`
github.com/mashingan/smapping	`0.1.19`	`0.1.20`
github.com/mattn/go-sqlite3	`1.14.50`	`1.14.52`
github.com/pk910/dynamic-ssz	`1.3.3-0.20260921152246-990798fa9718`	`1.3.3`
golang.org/x/crypto	`0.55.0`	`0.57.0`
golang.org/x/text	`0.41.0`	`0.42.0`

Updates github.com/ethereum/go-ethereum from 1.17.5 to 1.17.6

Release notes

Sourced from github.com/ethereum/go-ethereum's releases.

Inorganic Lubricant (v1.17.6)

This is a maintenance release with a number of performance improvements to block processing and initial sync, and is recommended for all users.

A few things worth highlighting:

The Amsterdam hardfork is scheduled on the Sepolia testnet at timestamp 1791294816 (Oct 6, 2026, 13:53:36 UTC). Sepolia node operators must upgrade before that time.

The Holesky testnet has been removed, as the network reached end-of-life.

Go 1.24 is no longer supported. Release binaries and Docker images are now built with Go 1.27.

Fork Implementation

Schedule the Amsterdam fork on Sepolia (#35734)

Remove the EIP-7610 implementation (#35581)

Update EIP-2780 and EIP-8038 gas parameters (#35454, #35497)

Update EIP-7997 deterministic factory contract (#35458)

Update EIP-8037, repaying the outstanding gas debt first after absorbing a child frame (#35633)

Implement parallel block execution driven by the block-level access list (#35264, #35441, #35443, #35459, #35461, #35465, #35575, #35693)

Rename "regular gas" to "execution gas" to match EIP-8037 (#35457, #35486)

Core

Remove the Holesky testnet (#35591)

Optimize JSON decoding of large requests such as engine_newPayload (#35518)

Process the receipts for bloom construction and root calculation alongside execution (#35738)

Introduce a precompile result cache shared between prefetcher, block processing and miner (#35388, #35473, #35526, #35578, #35753)

Parallelize chain data and state writes in the post-execution commit (#35595)

Do not seal a block if a database error occurred (#35427)

Fix a panic in the log indexer when a reorg shortens the chain onto the rendered block (#35619)

Honor ExecuteConfig.EnableTracer for the EVM-level tracing hooks (#35512)

Add a metered LRU cache variant (#33719)

Retain block-level access lists alongside bad blocks (#35423)

Unset the block-level access list at the end of each transaction (#35498)

Fix the blob cache initialization (#35509)

Fix head truncation below a diverged tail group (#35551)

Improve the blob fetcher with a few defensive operations (#35572)

Fix deadlock when re-requesting partial receipts in eth/70 (#35537)

Reject empty partial receipt responses in eth/70 (#35593)

Cap the total size of blocked blob transactions in the sparse blobpool (#35367)

Fix the Cells/GetCells RLP encoding in eth/72 (#35428)

Cache recovered blobs in the blobpool to speed up serving pre-eth/72 peers (#35543)

Add fork validation for transaction types in the state transition (#35588)

Avoid announcing sparse blob txs to legacy peers (#35589)

Add eth/71 (EIP-8159) tests (#35389)

Fix gas tracer hooks and gas measurement (#35646)

The eth/72 blob buffer is capped at 128 MiB total and 16 MiB per peer (#35766)

Sync

... (truncated)

Commits

3d84c6b version: release 1.17.6 (#35770)
bb81e22 cmd/geth, core, eth: add flag to disable precompile cache (#35753)
c6e3a0d core/txpool/blobpool: bound what the blob buffer holds (#35766)
5b5c9d0 core, core/types: hash the receipts alongside execution (#35738)
2aaf1a1 ethdb/memorydb: don't treat batch delete of the empty key as a range delete (...
c1c2f8d go.mod: update otel to 1.46.0 (#35754)
23408c2 core/state: fix EIP number in selfdestruct comment (#35759)
89def4a core, params: schedule amsterdam fork on sepolia (#35734)
a5b90d2 core, eth, miner, cmd/evm: ensure the parallel state processor records otel s...
19bdbb0 eth/protocols/snap: port optimizations into snap v2 (#35705)
Additional commits viewable in compare view

Updates github.com/ethpandaops/spamoor from 1.2.4-0.20260925130528-570d240766f6 to 1.2.4

Release notes

Sourced from github.com/ethpandaops/spamoor's releases.

v1.2.4

Major Changes

Replaced go-ethereum core/types with a self-contained txtypes package (own transaction/receipt types, RLP codec, signer, JSON marshalling and a runtime tx type registry)

Added EIP-8141 frame transaction support with the new frametx and frametx-fuzz scenarios (all envelope shapes incl. POST_TX, keyed nonces, contract senders/paymasters, coverage-driven fuzzing, chain support detection)

Added exclusive client groups: group(-name) removes a client from a group so reserved clients are only reachable via their group

Fixed several concurrency and nonce tracking bugs (atomic spammer start, compare-and-swap nonce advancement, skipped nonce reuse, ClientPool selection safety, funding underflow, batcher deploy state, blocking batch errors)

Sized erc20_bloater batches for Amsterdam state-creation gas and improved tx-fuzz throughput with stuck tx replacement

Bumped minimum Go version to 1.26 and updated the Authenticatoor client for shared session management and background token refresh

Full changelog

753b08c Merge pull request #281 from ethpandaops/pk910/frametx-fuzz

d92d2b8 Read keyed nonce slots outside the ledger lock

a2c6299 Reserve keyed nonce slots in flight and fix keyless confirm in frametx-fuzz

4e5559b Keep keyed nonces out of the account-nonce skip list and pair sorted keys with slots

46bb302 Drop unused symbols in frametx-fuzz flagged by staticcheck

daca4a9 Merge remote-tracking branch 'origin/master' into pk910/frametx-fuzz

56fcf9e Merge pull request #284 from ethpandaops/dependabot/go_modules/dependencies-69c415d369

a57572a Merge branch 'master' into dependabot/go_modules/dependencies-69c415d369

415012e Merge pull request #287 from ethpandaops/pk910/go-1.26

f2825ae Bump minimum Go version to 1.26

d7b183a Drop dead nonce increments in xentoken deployment

0819e2c Merge pull request #283 from ethpandaops/qu0b/exclusive-client-groups

a0e9020 Merge branch 'master' into qu0b/exclusive-client-groups

74e0a6f Merge pull request #286 from ethpandaops/pk910/combined-fixes

7a56f71 Release erc20_bloater nonces of txs that failed at submission

12cbc65 Use the compare-and-swap helper in SetNonce as well

cff98b0 Size erc20_bloater batches for Amsterdam state-creation gas

83af687 Call OnComplete when submission is skipped for a cancelled context

8285493 Release the spammer map lock while pausing a spammer on delete

2f9ec82 Credit child wallets when funding without a batcher

017a808 Advance the pending nonce counter with compare-and-swap on confirmation

0d62005 Signal batch errors without blocking failed sub-goroutines

f366833 build(deps): bump the dependencies group across 1 directory with 2 updates

da4ac77 update frame transactions to latest format

9bfe85f test: selection-level proof that a reserved client is unreachable without its group

e88c6db feat(client): group(-name) removes a client from a group

ccef3e7 spammer-configs: frame transaction readiness ladder

d3ec2be frametx-fuzz: fuzz contract senders and paymasters with reclaimed funding

7aef2bb spamoor: watch untracked transactions by hash

db9bee9 frametx-fuzz: fuzz the sender and paymaster roles

4c5efd6 frametx-fuzz: deploy and call fuzzed contracts from frames

0043c6a frametx-fuzz: fuzz frame transactions by coverage, not by verdict

c7f1978 frametx: take frame support from the txpool

b6c07cb utils: share the deterministic fuzzing generator

4b94094 spamoor: frame transaction support as a chain property

43aa6fe txtypes: keyed nonce and recent root protocol helpers

9ac9b69 frametx: detect chain support from state, not error text

... (truncated)

Commits

See full diff in compare view

Updates github.com/ethpandaops/xatu from 1.22.1-0.20260824050538-619c572d19c3 to 1.22.1

Release notes

Sourced from github.com/ethpandaops/xatu's releases.

v1.22.1

What's Changed

feat: add typed ClickHouse read package (pkg/proto/clickhouse) by @samcm in ethpandaops/xatu#886

fix(cannon): resolve EL ceiling via finality checkpoint instead of cached "finalized" alias by @selfuryon in ethpandaops/xatu#885

New Contributors

@selfuryon made their first contribution in ethpandaops/xatu#885

Full Changelog: ethpandaops/xatu@v1.22.0...v1.22.1

Commits

See full diff in compare view

Updates github.com/mashingan/smapping from 0.1.19 to 0.1.20

Commits

191284e add test for dynamic map scanning rows
4401787 support for dynamic map scanning rows
See full diff in compare view

Updates github.com/mattn/go-sqlite3 from 1.14.50 to 1.14.52

Release notes

Sourced from github.com/mattn/go-sqlite3's releases.

1.14.52

What's Changed

Replace schema probe with eager first step for cached statements by @mattn in mattn/go-sqlite3#1454

Full Changelog: mattn/go-sqlite3@v1.14.51...v1.14.52

1.14.51

What's Changed

fix: Exec returns wrong arg count in "not enough args" error by @semihbkgr in mattn/go-sqlite3#1396

refactor: Clean up deprecated // +build legacy build tags by @zxysilent in mattn/go-sqlite3#1428

Fixed som typos and wrappings in sqlite3_func_crypt.go documentation. by @kberov in mattn/go-sqlite3#1367

Replace copy-on-write handle map with sync.Map by @mattn in mattn/go-sqlite3#1453

Avoid per-row goroutines for query cancellation by @bradengroom in mattn/go-sqlite3#1444

Flush statement cache when the schema changes by @mattn in mattn/go-sqlite3#1452

New Contributors

@semihbkgr made their first contribution in mattn/go-sqlite3#1396

@zxysilent made their first contribution in mattn/go-sqlite3#1428

@kberov made their first contribution in mattn/go-sqlite3#1367

@bradengroom made their first contribution in mattn/go-sqlite3#1444

Full Changelog: mattn/go-sqlite3@v1.14.50...v1.14.51

Commits

b0be46f Merge pull request #1454 from mattn/fix-stmt-cache-probe-cost
c8212b8 Replace schema probe with eager first step for cached statements
d7f5da7 Merge pull request #1452 from mattn/fix-stmt-cache-schema-change
6428cad Merge pull request #1444 from bradengroom/codex/efficient-query-cancellation
be93f7a Merge pull request #1453 from mattn/fix-handle-map-quadratic
5b285a1 Merge branch 'master' into codex/efficient-query-cancellation
2294cd9 Replace copy-on-write handle map with sync.Map
5341cee Gate cache on runtime version and skip probing in transactions
c7ed68d Flush statement cache when the schema changes
6507893 Merge pull request #1367 from kberov/typos
Additional commits viewable in compare view

Updates github.com/pk910/dynamic-ssz from 1.3.3-0.20260921152246-990798fa9718 to 1.3.3

Release notes

Sourced from github.com/pk910/dynamic-ssz's releases.

v1.3.3

Fixed

Fix treeproof.Wrapper building a non-canonical Merkle tree for containers that interleave buffered Append* fields with directly added Put*/AddNode fields - pending bytes are now flushed to leaf nodes before a node is added or a scope checkpoint is captured, so the leaf order matches hasher.Hasher

Fix GetTree(x).Hash() diverging from HashTreeRoot(x), and proofs derived from the tree failing to verify, for Deneb and later BeaconState, BeaconBlock, SignedBeaconBlock, ExecutionPayload and ExecutionPayloadHeader; this affects every release since GetTree was introduced in v1.1.1, while HashTreeRoot, MarshalSSZ and UnmarshalSSZ are unaffected

Full changelog

cd9bf5e bump version to 1.3.3

c665ec7 fix GetTree htr mismatch (#192)

Changelog

Sourced from github.com/pk910/dynamic-ssz's changelog.

[v1.3.3] 2026-08-26

Fixed

Fix treeproof.Wrapper building a non-canonical Merkle tree for containers that interleave buffered Append* fields with directly added Put*/AddNode fields - pending bytes are now flushed to leaf nodes before a node is added or a scope checkpoint is captured, so the leaf order matches hasher.Hasher

Fix GetTree(x).Hash() diverging from HashTreeRoot(x), and proofs derived from the tree failing to verify, for Deneb and later BeaconState, BeaconBlock, SignedBeaconBlock, ExecutionPayload and ExecutionPayloadHeader; this affects every release since GetTree was introduced in v1.1.1, while HashTreeRoot, MarshalSSZ and UnmarshalSSZ are unaffected

[v1.3.2] 2026-06-21

Added

Add support for ssz-type:"optional-list" to encode Go pointer fields as canonical SSZ List[T, 1]

Changed

Performance improvements in codegen marshal/unmarshal and hash-tree-root operations

Bump github.com/pk910/hashtree-bindings dependency to 0.2.2 for optimized riscv support

Update CI actions including codeql-action, checkout, and codecov-action

Fixed

Fix hash-tree-root mismatch for progressive bitlists with all-zero top chunks

Fix streaming reflection unmarshal panic on malformed nested lists

Fix various marshal/HTR/stream inconsistencies found by differential fuzzing

Fix unmarshaling empty lists to an empty slice

Fix type tree traversal for fully delegated types

[v1.3.1] 2026-04-22

Added

Add support for custom struct types as type-wrapper with ssz-type:"wrapper", removing the need for a descriptor struct and GetDescriptorType method

Add YAML config file support to dynssz-gen with --config flag for easier code generation management

Changed

Optimize treeproof multiproof verification with a faster path for indices on the same tree level, reducing allocations and improving performance

[v1.3.0] 2026-03-31

Added

SSZ Views — custom view types that decouple the SSZ schema from the Go struct layout, allowing different field orders and custom type mappings. Views are supported in both reflection and codegen paths, including views from external packages.

Incremental hasher — new hashing strategy for lists that processes elements in chunks rather than buffering all leaves in memory, significantly reducing memory consumption for large lists. Requires code regeneration to take effect; existing generated code continues to work with the previous hashing approach.

SszError wrapper — structured error type with consistent error messages across reflection and codegen code paths

Error path tracking in generated code — errors include the field path for easier debugging

Custom type annotations via sszutils.Annotate — programmatic SSZ tag overrides for types that cannot use struct tags

Backward compatibility tests — CI validates that code generated by older releases still compiles and works correctly

Internal write buffer for marshal-to-stream, reducing syscall overhead

Function header documentation in generated code

Code scanning (CodeQL) and OpenSSF best practices

... (truncated)

Commits

See full diff in compare view

Updates golang.org/x/crypto from 0.55.0 to 0.57.0

Commits

3f62bf1 go.mod: update golang.org/x dependencies
86efde5 ssh: reject unexpected message types on established channels
a6cdac6 ssh: drop traffic on undecided channels
39dc44e ssh: don't skip the source-address critical option in CheckCert
afebf4c x509roots/fallback/bundle: make subjectsEqual stricter on Go 1.27+
89f4e9b x509roots/fallback: update bundle
71488c4 ssh/knownhosts: compare only public key portions for revocation
82adefa ssh: synchronize unexpected response test
c757c98 all: upgrade go directive to at least 1.26.0 [generated]
593c81a ssh: correctly ignore pre-banner lines
Additional commits viewable in compare view

Updates golang.org/x/text from 0.41.0 to 0.42.0

Commits

fafe4a0 go.mod: update golang.org/x dependencies
f53c316 unicode/norm: don't truncate runes in the recomposition map key
37867f6 unicode/norm: let any starter block composition in compose
0dd525f unicode/norm: compose non-Hangul runes after a Hangul syllable
bac26e5 unicode/norm: avoid improper ErrShortDst return in Form.transform
4f55186 unicode/norm: simplify short source detection in Form.transform
a1b6c10 unicode/norm: prevent decomposeSegment from moving backwards
cd1cbc9 unicode/bidi: panic rather than log.Panicf
a459614 internal/export/idna: fix conformance with optional validation disabled
be70a61 internal/export/idna: drop trie field from Profiles
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates Bumps the dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/ethereum/go-ethereum](https://github.com/ethereum/go-ethereum) | `1.17.5` | `1.17.6` | | [github.com/ethpandaops/spamoor](https://github.com/ethpandaops/spamoor) | `1.2.4-0.20260925130528-570d240766f6` | `1.2.4` | | [github.com/ethpandaops/xatu](https://github.com/ethpandaops/xatu) | `1.22.1-0.20260824050538-619c572d19c3` | `1.22.1` | | [github.com/mashingan/smapping](https://github.com/mashingan/smapping) | `0.1.19` | `0.1.20` | | [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) | `1.14.50` | `1.14.52` | | [github.com/pk910/dynamic-ssz](https://github.com/pk910/dynamic-ssz) | `1.3.3-0.20260921152246-990798fa9718` | `1.3.3` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.55.0` | `0.57.0` | | [golang.org/x/text](https://github.com/golang/text) | `0.41.0` | `0.42.0` | Updates `github.com/ethereum/go-ethereum` from 1.17.5 to 1.17.6 - [Release notes](https://github.com/ethereum/go-ethereum/releases) - [Commits](ethereum/go-ethereum@v1.17.5...v1.17.6) Updates `github.com/ethpandaops/spamoor` from 1.2.4-0.20260925130528-570d240766f6 to 1.2.4 - [Release notes](https://github.com/ethpandaops/spamoor/releases) - [Commits](https://github.com/ethpandaops/spamoor/commits/v1.2.4) Updates `github.com/ethpandaops/xatu` from 1.22.1-0.20260824050538-619c572d19c3 to 1.22.1 - [Release notes](https://github.com/ethpandaops/xatu/releases) - [Commits](https://github.com/ethpandaops/xatu/commits/v1.22.1) Updates `github.com/mashingan/smapping` from 0.1.19 to 0.1.20 - [Commits](mashingan/smapping@v0.1.19...v0.1.20) Updates `github.com/mattn/go-sqlite3` from 1.14.50 to 1.14.52 - [Release notes](https://github.com/mattn/go-sqlite3/releases) - [Commits](mattn/go-sqlite3@v1.14.50...v1.14.52) Updates `github.com/pk910/dynamic-ssz` from 1.3.3-0.20260921152246-990798fa9718 to 1.3.3 - [Release notes](https://github.com/pk910/dynamic-ssz/releases) - [Changelog](https://github.com/pk910/dynamic-ssz/blob/master/CHANGELOG.md) - [Commits](https://github.com/pk910/dynamic-ssz/commits/v1.3.3) Updates `golang.org/x/crypto` from 0.55.0 to 0.57.0 - [Commits](golang/crypto@v0.55.0...v0.57.0) Updates `golang.org/x/text` from 0.41.0 to 0.42.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.41.0...v0.42.0) --- updated-dependencies: - dependency-name: github.com/ethereum/go-ethereum dependency-version: 1.17.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github.com/ethpandaops/spamoor dependency-version: 1.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github.com/ethpandaops/xatu dependency-version: 1.22.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github.com/mashingan/smapping dependency-version: 0.1.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github.com/mattn/go-sqlite3 dependency-version: 1.14.52 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github.com/pk910/dynamic-ssz dependency-version: 1.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: golang.org/x/crypto dependency-version: 0.57.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: golang.org/x/text dependency-version: 0.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

redpandabot · 2026-09-28T09:06:37Z

Summary

Pure dependency bump: 8 direct deps updated in go.mod plus transitive go.sum fallout. OSV is clean for all eight new versions except GO-2026-5932 on golang.org/x/crypto, which affects all versions (introduced: 0), is scoped to the openpgp subpackage, and is not imported anywhere in dora — it predates and is unaffected by this bump. The remaining go.sum churn (go-openapi/swag module split, otel/sdk and genproto bumps, removal of josharian/intern and mailru/easyjson) is normal transitive fallout, and the spamoor/xatu/dynamic-ssz moves are pseudo-version → tagged release. Clean.

Issues

🟢 go.mod — OSV hit on x/crypto is pre-existing and unreachable — OSV returns GO-2026-5932 (openpgp package unmaintained/unsafe) for golang.org/x/crypto 0.57.0, but the advisory's introduced: 0 means 0.55.0 was equally affected, and it only applies to golang.org/x/crypto/openpgp and its subpackages, which this repo never imports. Informational only; no action needed in this PR.

_{Reviewed @ 2793332f}
_{Red pandas are the original panda — described in 1825, almost half a century before the giant panda.}

redpandabot · 2026-09-28T09:09:50Z

CI failed @ `2793332f`

1 failed job, all diagnosed as pr_change. Dependabot's bump of github.com/pk910/dynamic-ssz from pseudo-version v1.3.3-0.20260921152246-990798fa9718 to the v1.3.3 tag is a semver downgrade (pseudo-version sorts below the tag; the tag is diverged from the commit and lacks symbols go-eth2-client's generated SSZ code needs), breaking compilation of go-eth2-client/spec/phase0 under go vet.

Check PR / Run code checks / Run code checks — caused by this PR — The PR's go.mod diff changed github.com/pk910/dynamic-ssz from v1.3.3-0.20260921152246-990798fa9718 to the v1.3.3 tag (go.mod:30 at PR head). This is a content downgrade: a commit after tag v1.3.2 gets pseudo-version v1.3.3-0.-, which sorts below the v1.3.3 tag, so dependabot's 'bump' lowered the resolved version. Verified via GitHub API: dynamic-ssz commit 990798fa9718 defines sszutils.ErrOffsetOverflowFn (sszutils/error.go, 3 matches) and sszutils.MaxSszSize (sszutils/unmarshal.go, 2 matches), while tag v1.3.3 contains neither (0 matches in both files); compare v1.3.3...990798fa9718 returns status 'diverged' (156 ahead / 2 behind), so the tag will never gain them. go-eth2-client's own go.mod at ref ca5a8d69aba5 requires dynamic-ssz v1.3.3-0.20260921152246-990798fa9718, and its generated SSZ code (e.g. api/v1/fulu/blockcontents_ssz.go, header '// Version: v1.4.0-pre.3 (github.com/pk910/dynamic-ssz)') imports github.com/pk910/dynamic-ssz/sszutils and uses those symbols. Once dora's requirement rose to the v1.3.3 tag, MVS resolved the build to v1.3.3, making sszutils.ErrOffsetOverflowFn, sszutils.MaxSszSize and sszutils.Min undefined in go-eth2-client/spec/phase0. (go.mod:30) — Restore the pseudo-version: set go.mod:30 to 'github.com/pk910/dynamic-ssz v1.3.3-0.20260921152246-990798fa9718' (equivalently 'go get github.com/pk910/dynamic-ssz@990798fa9718') and run 'go mod tidy' to restore the matching go.sum entries (go.sum:546-547 currently hold only the v1.3.3 tag hashes).

_{Diagnosed Check PR @ 2793332f}
_{Red pandas are the original panda — described in 1825, almost half a century before the giant panda.}

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 28, 2026

Navigation Menu

build(deps): bump the dependencies group across 1 directory with 8 updates - #879

build(deps): bump the dependencies group across 1 directory with 8 updates#879
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/dependencies-6ac0ef2cf7

dependabot Bot commented on behalf of github Sep 28, 2026

Uh oh!

redpandabot Bot commented Sep 28, 2026

Uh oh!

redpandabot Bot commented Sep 28, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 28, 2026

Inorganic Lubricant (v1.17.6)

Fork Implementation

Core

Sync

v1.2.4

Major Changes

Full changelog

v1.22.1

What's Changed

New Contributors

1.14.52

What's Changed

1.14.51

What's Changed

New Contributors

v1.3.3

Fixed

Full changelog

[v1.3.3] 2026-08-26

Fixed

[v1.3.2] 2026-06-21

Added

Changed

Fixed

[v1.3.1] 2026-04-22

Added

Changed

[v1.3.0] 2026-03-31

Added

Uh oh!

redpandabot Bot commented Sep 28, 2026

Summary

Issues

Uh oh!

redpandabot Bot commented Sep 28, 2026

CI failed @ 2793332f

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

CI failed @ `2793332f`